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Top Stories 

• Ford announced the recall of around 386,000 model year 2001-2004 Escape vehicles due to 
the potential for subframe rusting caused by road salt, and the recall of about 49,000 model 
year 2013 and 2014 Ford Fusion, Escape, and C-MAX, and Fincoln MKZ vehicles due to 
improperly welded seat back frames. - Associated Press (See item 3 ) 

• The Virginia Department of Public Health advised residents to avoid recreational use of a 
section of the Pigg River after about 30,000 gallons of cow manure wastewater spilled into 
a tributary of the river in Franklin County April 3. - Associated Press (See item 20 ) 

• Eos Angeles County officials reported April 3 that the number of victims impacted by a 
medical data breach rose by 170,200 totaling 338,700 victims, after a February theft of 8 
computers at a Sutherland Healthcare Solutions office. - Los Angeles Times (See item 23 ) 

• Violence broke out at an Isla Vista, California street party, dubbed Deltopia, April 5 after 
at least 18 people were arrested in connection with the disturbance and more than two 
dozen people were injured, including 6 police officers. - CNN (See item 37 ) 
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Energy Sector 



1. April 6, WTRF 7 Wheeling - (West Virginia) Marshall County pipeline explosion 
results in fire. Crews responded to an April 5 Williams Energy-owned 12-inch 
pipeline explosion and fire in Marshall County, West Virginia, after a hillside slipped 
and caused the pipeline to rupture between Waymans Ridge and Middle Creek. 
Authorities are investigating after the fire was contained and put out. 

Source: http://www.wtrf.com/storv/25170251/gas-line-explosion-in-marshall-countv- 
results-in-fire 

2. April 4, Great Falls Tribune - (Montana; Alaska; Idaho) Oil company indicted for 
fraud. Idaho-based DMC Technologies, its chief executive officer, and a third 
individual were charged in Anchorage March 28 for allegedly falsifying records related 
to the cleanup of a drilling site on the North Slope oil field. Alaska officials also 
reported the company submitted reports showing that the site was cleaned, while an 
investigation found that the site remained contaminated and required further cleanup. 
Source: http ://w w w . greatfallstribune ■com/article/20 1 40404/NEWS0 1 /304040035/Qil- 
company-indicted-fraud 
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Chemical Industry Sector 

See item 8 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

3. April 7, Associated Press - (National) Ford recalls nearly 435,000 vehicles. Ford 
announced two recalls, the first of around 386,000 model year 2001-2004 Escape 
vehicles due to the potential for subframe rusting caused by road salt, which could 
cause control arm separation and impaired steering control. The second recall involves 
49,000 model year 2013 and 2014 Ford Fusion, Escape, and C-MAX, and Lincoln 
MKZ vehicles due to improperly welded seat back frames. 

Source: http://abcnews.go.com/Business/wireStorv/ford-recalls-435000-vehicles- 
23224770 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

4. April 5, Softpedia - (International) Farm supply store Rural King hacked, attackers 
access financial information. The Matton, Illinois-based Rural King farm supply store 
began notifying customers that it experienced a data breach where attackers may have 
stolen names, payment card numbers, verification codes, phone numbers, addresses, 
and other information. The breach began February 6, was detected March 7, and 
attackers were completely blocked out by March 12. 

Source: http://news.softpedia.com/news/Farm-Supply-Store-Rural-King-Hacked- 
Attackers-Access-Financial-Information-436039.shtml 

5. April 4, Chicago Sun-Times - (Illinois) ‘Shady Bandit’ nabbed for North Side bank 
robbery. A suspect known as the “Shady Bandit” was arrested April 1 and charged 
with the robbery of a TCF Bank branch in Chicago February 1 1 . The woman is also 
suspected of robbing two other TCF Bank branches in May and November 2013. 
Source: http://chicago.cbslocal.com/2014/04/04/shadv-bandit-nabbed-for-north-side- 
bank-robbery/ 

6. April 4, Reuters - (New Jersey) SEC charges trading firm owner, others in 
‘spoofing’ case. The U.S. Securities and Exchange Commission charged a co-owner of 
New Jersey-based Visionary Trading LLC with engaging in rapidly placing orders to 
create the illusion of demand, known as spoofing. The co-founder agreed to pay $1.9 
million in a settlement, and three other co-owners who were also charged in relation to 
the case through involvement with Lightspeed Trading LLC will collectively pay 
around $3 million to settle charges. 

Source: http://www.chicagotribune.com/business/sns-rt-us-sec-enforcement-spoofing- 
20 140404,0,5299376 .story 

7. April 4, Fort Lauderdale Sun-Sentinel - (Llorida) Delray man accused of stealing 
debit card information at ATMs. A Delray Beach man was arrested April 1 for 
allegedly working with another individual to place skimmers on several ATMs at 
Publix stores in Delray Beach and Boca Raton. The man then allegedly used stolen 
payment card data to purchase gift cards. 

Source: http://www.sun-sentinel.com/news/palm-beach/boca-raton/fl-delray-boca- 
skimmer-arrest-20140404,0,6488993.story 



Lor additional stories, see items 32 and 36 
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Transportation Systems Sector 



8. April 7, WCYB 5 Bristol - (Virginia) US Highway 23 reopens after crash. A portion 
of U.S. Highway 23 in Wise County was shut down for 5 hours April 7 after 2 semi- 
trucks carrying liquid nitrogen crashed into each other and spilled nearly 1 ,000 gallons 
of liquid nitrogen onto the ground after one of the semi-trucks lost its brakes and rear- 
ended the other vehicle. One driver was hospitalized. 

Source: http://www.wcvb.com/news/crash-chemical-spill-closes-us-hwy-23/25356892 

9. April 7, WDAF 4 Kansas City - (Missouri) Small plane crashes near baseball field in 
Lee’s Summit Park. Police are investigating a small plane crash April 6 in Legacy 
Park in Lee’s Summit that caused two men to be hospitalized with minor injuries. 
Source: http://fox4kc.com/2014/04/06/plane-crashes-near-baseball-field-in-lees- 
summit-park/ 

10. April 7, WATE 6 Knoxville - (Tennessee) Section of Chapman Highway shut down 
following semi-truck crash. Crews shut down the southbound lanes of a section of the 
Chapman Highway in Knoxville April 7 after a semi-truck hauling several vehicles 
crashed into a light pole. 

Source: http://www.wate.com/story/25178515/section-of-chapman-highwav-shut- 
down-following-semi-truck-crash 

11. April 6, WJXX 25 Orange Park/WTLV 12 Jacksonville - (Florida) Two dead in plane 
crash at movie filming. The Federal Aviation Administration is investigating what 
caused a small plane’s engine to stall and crash nose-first in Marion County April 6, 
killing two people while filming a movie. 

Source: http://www.firstcoastnews.com/story/news/2014/04/06/marion-county-plane- 
crash/7403429/ 

12. April 5, Athens News - (Ohio) Small plane crashes near OU airport, killing pilot. 

The Ohio Highway Patrol is investigating after the pilot of a single-engine aircraft died 
when the small plane crashed and landed upside down April 5 near Albany, Ohio. 
Source: http://www.athensnews.com/ohio/article-42109-small-plane-crashes-near-ou- 
airport.html 

13. April 3, KTVU 2 Oakland - (California) Planes rerouted after Oakland Int’l 
runways goes dark. Five planes were forced to re-route April 2 after an unexplained 
blackout on the Oakland International Airport runway for about 20 minutes until crews 
turned on the lights manually. 

Source: http://www.ktvu.com/news/news/local/planes-rerouted-after-oakland-intl- 
runways-goes-da/nfRnz/ 

For another story, see item 14 
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Food and Agriculture Sector 



14. April 7, Cliffview Pilot - ( New Jersey) Tipped Route 287 tractor-trailer spills milk 
in Mahwah. The driver of a Midland Farms semi-truck fell asleep, crashing the vehicle 
into a median and tipping it onto its side April 7, and spilling thousands of gallons of 
milk onto southbound Route 287 in Mahwah. Crews worked to clean the spill and used 
heavy-duty wreckers to remove the semi-truck. 

Source: http://cliffviewpilot.com/tipped-tractor-trailer-on-route-287-spills-milk-in- 
mahwah/ 

15. April 5, Food Safety News - (International) British Airways meals recalled for 
possible Listeria contamination. Flying Food Group, an airline catering company, 
announced a recall April 4 of its Char Grilled Asparagus and Grapefruit Appetizer 
meals due to possible Listeria monocytogenes contamination. The 41 appetizer meals 
were prepared at the company’s Miami facility and served on 3 British Airways flights 
that departed from Miami in March. 

Source: http://www.foodsafetvnews.com/2014/04/british-airways-meals-recalled 

16. April 4, Columbus Telegram - (Nebraska) ADM paying penalty for air quality 
violations. Archer Daniels Midland Company will pay a $20,000 fine to resolve a 
complaint by the Nebraska Department of Environmental Quality stating that the 
company’s ethanol plant in Columbus, Nebraska, violated State air quality regulations. 
Emissions reports submitted by the company in 2010 showed nitrogen oxides levels 
that exceeded permitted limits. 

Source: http://columbustelegram.com/news/local/adm-paying-penalty-for-air-quality- 
violations/article 12 1 dafgcTX ) 7 9 - 5 3 a 2 - a 6 f ( ) - a f 9 f ( ) 6 c f ( I9d4.html 

17. April 4, U.S. Food and Drug Administration - (California) Whole Foods Market’s 
northern California region recalls Chipotle Chicken Wraps due to undeclared fish 
allergen. The U.S. Food and Drug Administration announced April 4 that Whole Foods 
Market’s northern California region recalled its Chipotle Chicken Wrap products due to 
misbranding and undeclared fish. 

Source: http://www.fda.gov/Safety/Recalls/ucm391988.htm 

18. April 4, Food Safety News - (National) Organic black peppercorns recalled for 
possible Salmonella contamination. Sprouts Farmers Market, Inc., recalled its store- 
branded organic black peppercorns products April 4 due to possible Salmonella 
contamination. The company also recalled Frontier-branded and Simply Organic- 
branded organic whole black peppercorns as a precaution. 

Source: http://www.foodsafetynews.com/2014/04/organic-black-peppercorns-recalled- 
for-possible-salmonella-contamination/ 

19. April 4, U.S. Department of Agriculture - (National) Missouri firm recalls chicken 
nugget products due to possible foreign matter contamination. Tyson Foods Inc., 
issued a recall for approximately 75,320 pounds of frozen, fully cooked chicken nugget 
products April 4 due to possible contamination by extraneous materials. The issue was 
discovered after the company received reports that fragments of plastic were found in 
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the products, which was later traced to a problem with a blending machine. 
Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archive/2014/recall-02 1-20 14-release 
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Water and Wastewater Systems Sector 

20. April 7, Associated Press - (Virginia) Manure spill in Franklin Co. river. The 
Virginia Department of Public Health advised residents to avoid recreational use of a 
section of the Pigg River after about 30,000 gallons of cow manure wastewater spilled 
into a tributary of the river in Franklin County April 3. 

Source: http://wfirnews.com/local-news/manure-spill-in-franklin-co-river 

21. April 6, WIS 10 Columbia - (South Carolina) City issues boil water advisory for 
parts of Columbia. Some areas of Columbia, South Carolina, were placed under a boil 
water advisory April 6 after a 6-inch water main broke, causing a loss of water pressure 
and possible bacterial contamination. 

Source: http://www.wistv.com/storv/25174285/citv-issues-boil-water-advisory-for- 
parts-of-columbia 
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Healthcare and Public Health Sector 

22. April 4, Associated Press - (Michigan) Names, addresses, Social Security numbers 
of 2,500 stolen from state health department. The Michigan Department of 
Community Health reported April 3 that an encrypted laptop and an unencrypted flash 
drive containing the personal information of more than 2,500 living and deceased 
individuals was stolen in January from the State Long Term Care Ombudsman’s Office 
by an employee. 

Source: http://www.wxvz.com/news/state/personal-information-of-2500-stolen-from- 
state-health-department-flash-drive 

23. April 3, Los Angeles Times - (California) Medical data breach involves more than 
170,000 additional victims. Los Angeles County officials reported April 3 that the 
number of victims impacted by a medical data breach rose by 170,200, totaling 338,700 
victims, after a February theft of 8 computers during a break-in at the Torrance office 
of Sutherland Healthcare Solutions. The computers contained personal and medical 
data, as well as Social Security numbers and billing information. 

Source: http://www.latimes.com/local/lanow/la-me-ln-sutherland-data-breach- 
20140403,0,7636728.story 
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Government Facilities Sector 



24. April 7, Burlington County Times - (New Jersey) Major forest fire burning in 

Wharton State Forest; 70 percent contained. Crews reached 70 percent containment 
April 7 of a 1,500 acre forest fire burning in Wharton State Forest in New Jersey. The 
cause of the fire, which began April 6, is under investigation. 

Source: http://www.buiiingtoncountytimes.com/news/local/maior-forest-fire-burning- 
i n-wharton-state-forest/artide 5b87329a-42eb-50al-ab9e-la80bcbf3919.html 

25. April 7, WUSA 9 Washington, D.C. - (Maryland) Bus hits students near High Point 
High School. An unattended school bus in front of High Point High School in 
Beltsville rolled across the road and crashed, knocking into a student and injuring at 
least three others aboard the bus April 7. 

Source: http://www.wusa9.com/storv/news/2014/04/07/pedestrian-struck-montgornerv- 
county-md/741 1789/ 

26. April 6, Nebraska City News-Press - (Nebraska) Temporarily closed parks to reopen 
April 18, including two in Nebraska City. The Nebraska Game and Parks 
Commission will reopen 29 State Park areas April 18, 2 weeks earlier than planned, 
after work crews completed assigned projects ahead of schedule. The August 2013 
temporary closures were prompted by the requirement to defer maintenance needs and 
reduce staff and resources in order to meet environmental requirements and regulatory 
compliance. 

Source: http ://www .none wspress .com/article/20 1 40406/NEW S/1 40409884/- 1 /opinion 

27. April 4, KOLN 10 Lincoln - (Nebraska) Three students injured in school bus 
accident. A Leigh School District bus overturned and fell into a creek bed in Stanton 
County April 4, leaving 3 students injured. 

Source: http://www.wowt.com/news/headlines/Three-Students-Hurt-In-School-Bus- 
Accident-253914461.html 

28. April 4, Lansing State Journal - (Michigan) ‘Phishing’ attack involving MSU 
employees’ payroll information second in last 6 months. Michigan State University 
officials discovered April 1 that an estimated 10 employees had unauthorized changes 
to their direct deposit information in what authorities believe was a phishing attack to 
steal payroll earnings. Authorities continue to investigate the incident. 

Source: http://www.lansingstateiournal.com/article/20140404/NEWS06/304040034/- 
Phishing-attack-MSU-compromises-small-number-employees 

29. April 4, WBTV 3 Charlotte - (North Carolina) 11 injured when Rowan Co. school 
bus involved in Charlotte crash. An accident involving a Rowan-Salisbury School 
bus in Charlotte left 1 1 people injured April 4. 

Source: http ://w w w . wbtv .com/storv/25 1 6405 6/11 -ini ured-in-school-bus-crash-in- 
charlotte 
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Emergency Services Sector 



30. April 7, WFSB 3 Hartford - (Connecticut; Massachusetts) Man accused of making 
fake dispatch calls to face a judge. A suspect was arrested in Massachusetts April 4 in 
connection with making several unauthorized radio transmissions over Connecticut’s 
Litchfield County Dispatch channel, which interfered and interrupted service calls 
between December 2013 and January 2014. 

Source: http://www.wfsb.com/storv/25178217/man-accused-of-making-fake-dispatch- 
calls-to-face-a-judge 

For additional stories, see items 35 and 37 
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Information Technology Sector 

3 1 . April 5, Softpedia - (International) DDoS attack enabled by persistent XSS 
vulnerability on top video content provider’s site. Incapsula reported that they 
mitigated an application layer distributed denial of service (DDoS) attack against a 
client which utilized a cross-site scripting (XSS) vulnerability in a popular video 
content provider’s Web site. Malicious JavaScript code was injected into a tag 
associated with users’ profiles, which executed whenever a legitimate user accessed the 
page 

Source: http://news.softpedia.com/news/DDOS-Attack-Enabled-by-Persistent-XSS- 
Vulnerabilitv-on-Top-Video-Content-Provider-s-Site-436029.shtml 

32. April 4, Softpedia - (International) Upatre downloader distributed via banking- 
themed spam campaign. Researchers at Trend Micro detected a spam campaign using 
banking-themed emails to distribute the Upatre downloader, which in a sample 
downloaded the Zeus trojan and the Necurs security-disabling malware. 

Source: http://news.softpedia.com/news/Upatre-Downloader-Distributed-via-Banking- 
Themed-Spam-Campaign-435975.shtml 

33. April 4, The Register - (International) Five-year-old discovers Xbox password bug, 
hacks dad’s Live account. A San Diego boy identified and reported a vulnerability in 
Microsoft’s Xbox Live service that can allow access to a user’s account by repeatedly 
entering ‘space’ characters and then hitting ‘submit’ when prompted for a password. 
Microsoft closed the vulnerability after it was reported. 

Source: 

http://www.theregister.co.uk/2014/04/04/five year olds xbox live password hack/ 

34. April 4, Softpedia - (International) 85% of links spotted in cyberattacks in 2013 led 
to compromised legitimate sites. Websense Security Labs released their 2014 Threat 
Report, detailing threats and trends during the past year. The report found that 85 
percent of malicious links in email and Web attacks were directed at legitimate sites 
that were compromised by attackers, among other findings. 

Source: http://news.softpedia.com/news/85-of-Links-Spotted-in-Cyberattacks-in-2013- 



- 8 - 



Led-to-Compromised-Legitimate-Sites-435939.shtml 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

35. April 5, Glens Falls Post-Star - (New York) 911 service restored after logging truck 
accident. Land line service, including calls to 9-1-1, was interrupted for about 3,500 
Frontier Communications customers April 4 in areas of Luzerne, Stony Creek, Hadley, 
and Corinth after a semi-truck carrying logs on Route 9N pulled down some aerial 
cables, which caused Frontier’s fiber optic cable to be severed. Service was restored 
April 5 

Source: http://poststar.com/news/local/warren-countv-sheriff-s-office-restores- 
service/article 79a5 6d7 8 -beef- 1 1 e3- 8f85 -00 1 9bb2963f4 .html 



36. April 4, U.S. Attorney’s Office, Southern District of Florida - (Florida) Eight 

defendants charged in identity theft fraud scheme involving personal identifying 
information from AT&T customer files. Eight individuals were indicted on 22 counts 
of identity theft and fraud after a defendant working for a company contracted by 
AT&T to handle direct sales and customer inquiries used customers’ personal 
identifying information to fraudulently add the co-conspirators as authorized users to 
AT&T victims’ accounts, allowing them to make unauthorized wire transfers and 
obtain unauthorized credit and debit cards. 

Source: http://www.iustice.gov/usao/fls/PressReleases/140404-03.html 
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Commercial Facilities Sector 

37. April 7, CNN - (California) 'Deltopia' party in California turns violent; dozens 
arrested. Violence broke out at an Isla Vista street party, dubbed Deltopia, April 5 
after a police officer was hit in the head with a backpack containing bottles. At least 18 
people were arrested in connection with the disturbance and more than two dozen 
people were injured, including 5 police officers. 

Source: http://www.cnn.com/2014/04/06/us/califomia-street-partv-melee/ 

38. April 6, Attleboro Sun Chronicle - (Massachusetts) Fire destroys Foxboro’s historic 
Lakeview Pavilion. Authorities are investigating a 3-alarm fire at the Lakeview 
Pavilion in Foxboro April 5 that prompted the evacuation of 140 to 150 people and 
destroyed the building. 
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Source: http://www.thesunchronicle.com/news/local news/fire-destroys-foxboro-s- 
historic-lakeview-pavilion/article e822ebd0-bd31-lle3-8d4b-001a4bcf887a.html 



39. April 6, WPTZ 5 Plattsburgh - (Vermont) Police: meth lab catches fire, apartment 
building evacuates. Authorities responded to a St. Albans apartment building April 5 
after receiving reports of strong smells of burning plastic, and found an active one-pot 
methamphetamine lab and significant fire damage in one unit. Crews cleaned the scene 
and residents were allowed to return to their homes April 6. 

Source: http://www.wptz.com/news/vermont-new-vork/burlington/police-evacuate- 
building-after-finding-active-meth-lab/25345892 

40. April 5, Reuters - (Ohio) One dead, eight sickened in apparent carbon monoxide 
poisoning in Cleveland -police. Officials are investigating the cause of an April 4 
carbon monoxide leak at a 278-unit Cleveland apartment building after 1 person was 
found dead and 8 others were transported to an area hospital for treatment. 

Source: http://www.reuters.corn/article/2014/04/05/us-usa-ohio-poisoning- 
idUSBREA340LX20140405 



41. April 5, Milwaukee Journal Sentinel - (Wisconsin) Chlorine leak sends 17 to 
hospitals. Seventeen people were transported to area hospitals April 5 after an apparent 
chlorine leak at a Holiday Inn in New Berlin. 

Source: http://www.isonline.com/news/milwaukee/chlorine-leak-sends-17-to-hospitals- 
b99241557zl-254065011.html 

42. April 4, Philly.com - (Pennsylvania) Police find suspected meth lab in Montco hotel. 
Police discovered an alleged mobile methamphetamine lab at a Days Inn hotel in 
Horsham, Pennsylvania, April 4 while attempting to serve an unrelated arrest warrant 
to the man suspected of possessing the hazardous materials. The suspect fled the scene 
and the hotel was evacuated for approximately 3 hours while crews investigated and 
removed the substances. 

Source: 

http://www.phillv.com/philly/news/breaking/Police find possible meth lab in Monte 
o_hotel.html 



For another story, see item 4 
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Dams Sector 



Nothing to report 
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NTAS 



NO ACTIVE ALERTS 
wwvv.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
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Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
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